This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3138382e302f32332d3233203d3e203532383338.roa
File:                     3133382e302e3138382e302f32332d3233203d3e203532383338.roa (raw, json)
Hash identifier:          qSP2Fy2Q2uk3M0K5Ii3m00o6p8GszccVjwUNQUYiSoo=
Subject key identifier:   C8:5A:50:A4:43:3E:4F:E3:F6:65:B3:C6:8C:F5:85:41:48:AF:9C:F1
Certificate issuer:       /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial:       49C2684096F8FE4F5321B562D659DB4784A80CEA
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3138382e302f32332d3233203d3e203532383338.roa
Signing time:             Wed 03 Dec 2025 00:32:46 +0000
ROA not before:           Wed 03 Dec 2025 00:27:46 +0000
ROA not after:            Wed 02 Dec 2026 00:32:46 +0000
asID:                     52838
IP address blocks:        138.0.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
                          rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 23:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c2:68:40:96:f8:fe:4f:53:21:b5:62:d6:59:db:47:84:a8:0c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
        Validity
            Not Before: Dec  3 00:27:46 2025 GMT
            Not After : Dec  2 00:32:46 2026 GMT
        Subject: CN=C85A50A4433E4FE3F665B3C68CF5854148AF9CF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9e:c0:0b:b0:50:8d:b4:29:55:d9:98:aa:62:
                    db:ce:35:f9:f9:81:b3:e7:24:a7:c0:e6:2c:04:e9:
                    e5:92:04:f8:b4:1f:b0:61:29:e2:b2:1c:9b:ea:53:
                    b0:e4:ab:ca:03:ce:23:bc:b9:19:62:c2:1b:9a:00:
                    21:d7:8a:8e:39:e8:be:ee:7b:2a:15:31:b7:ab:e6:
                    3d:3e:9e:6b:95:84:83:1e:3b:ed:3e:a0:8c:a7:e9:
                    4f:47:05:93:8c:0b:e3:be:32:c2:41:fd:31:58:16:
                    49:db:cd:7a:74:bf:85:db:d7:df:ac:10:db:45:99:
                    d1:b4:92:1a:c7:a4:64:9b:b4:4e:9e:ab:06:a5:8f:
                    5d:49:3f:9c:dd:f7:24:05:d8:a6:03:fa:4a:9a:e6:
                    c1:9e:50:4e:94:9b:2b:70:94:7e:55:41:fa:e2:4c:
                    e5:34:46:dc:c3:d0:3d:32:81:8a:3d:df:e5:db:1f:
                    f6:50:63:51:b8:8d:23:98:a8:83:16:4d:92:8b:5c:
                    fb:bd:30:e6:a3:c0:10:45:89:4d:a3:33:2e:0b:ef:
                    e0:a0:d4:68:14:05:e1:f3:70:b0:81:22:99:ff:8f:
                    d0:9d:4b:96:54:75:d0:79:14:58:b4:ca:4c:6d:07:
                    25:40:6d:e5:9d:ce:ba:34:90:51:15:94:29:60:ce:
                    80:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5A:50:A4:43:3E:4F:E3:F6:65:B3:C6:8C:F5:85:41:48:AF:9C:F1
            X509v3 Authority Key Identifier:
                keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3138382e302f32332d3233203d3e203532383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:47:98:23:93:36:70:ae:36:e6:4c:0d:2f:5e:69:5d:62:3b:
         08:e8:3f:e5:bd:b2:63:87:e7:7b:e4:71:8f:24:78:04:0a:b4:
         43:88:15:0b:0f:6e:a6:3e:13:8d:0e:ed:6b:17:a6:c4:4d:c4:
         ab:c8:36:11:57:fb:cc:77:e7:58:9b:c3:da:98:32:51:b2:44:
         4d:ab:50:59:3f:a5:f0:06:4b:db:85:37:39:ca:e6:4e:69:64:
         86:6e:9d:d1:de:4d:cd:61:67:b9:ed:35:7f:50:03:cf:fe:30:
         ff:b8:16:0b:5d:46:ed:e6:09:a5:c3:c8:bf:44:99:b1:12:76:
         a7:9b:b7:33:f6:dd:35:0c:b7:eb:ed:72:8b:26:00:63:e6:9b:
         d8:b8:09:c7:05:f6:ac:d3:dd:1a:9a:c0:96:45:e9:fe:b7:17:
         4f:ef:32:4f:1c:0f:f7:98:24:34:49:a4:46:0b:40:c6:c4:55:
         1a:a6:62:f4:30:6c:78:8a:ce:04:3e:48:96:0b:b4:2c:24:b2:
         5d:7c:f3:47:6c:e9:8e:52:03:59:7f:53:28:5d:86:6f:4f:b1:
         e3:0b:ce:27:1b:8d:11:c1:5b:e0:91:1f:12:94:6b:78:5b:8b:
         b6:ed:e6:ba:3c:ba:e1:24:42:12:44:b6:c9:8c:cb:08:3d:93:
         32:f6:9a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:42:19 2025 by rpki-client